CVE-2026-53488

Implemented an SSRF protection mechanism with a configurable allow-list in settings (off / audit / enforce modes); Changed a default setting to enforce server-side EdgeID on first…

Fixed a 2.39.4 regression where a relative envfile: in a Git stack whose compose file lives in a repository sub-directory was resolved against the project root instead of the…

Kubernetes port forwarding on macOS and Linux has been fixed; Dark mode preference allowing choice between dark, light, and system themes under Preferences Behavior; Shell tab in…

Add dark mode preference allowing users to choose between dark, light, and system themes under Preferences Behavior; Add Shell tab in container detail page that opens an…

Do not default containerd.user=true on non-Linux guests; Copytool fallback to scp for remote source and destination in auto mode; Switch the default image from ubuntu-25.10 to…

Fix CVE-2026-50195; Fix CVE-2026-53488; Fix CVE-2026-53492; Fix CVE-2026-53489; Fix CVE-2026-47262; Filter CDI annotations on checkpoint restore in cri; Do not re-tag restored…

Address CVE-2026-53488 in containerd; Address CVE-2026-47262 in containerd; Address CVE-2026-34986 in go-jose by bumping go-jose/go-jose/v3 to v3.0.5; Bound user-database file…

Fix CVE-2026-53488; Fix CVE-2026-47262; Bound user-database file reads in openBoundedUserFile; Do not propagate reserved labels from image configs; Update runc binary to v1.3.6…

Fix CVE-2026-50195; Fix CVE-2026-53488; Fix CVE-2026-53492; Fix CVE-2026-53489; Fix CVE-2026-47262; Fix data race when reading shim logs on Windows; Allow the last host to retry…

Fix CVE-2026-50195; Fix CVE-2026-53488; Fix CVE-2026-53492; Fix CVE-2026-53489; Fix CVE-2026-47262; Filter CDI annotations on checkpoint restore; Do not re-tag restored…